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This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1-105. (Cancelled) 

106. (Previously Presented) A method for obtaining a digital license 
for rendering a piece of digital content comprising: 

contacting, by a license requestor, a license provider; 

sending, by the license requestor, a license request for the license to the 
contacted license provider; 

checking, by the license provider, the license request for validity; 

negotiating, by the license requestor and the license provider, terms and 
conditions for the requested license; 

generating, by the license provider, the requested license; and 

issuing, by the license provider, the generated license to the license requestor. 

107. (Previously Presented) The method of claim 106 wherein the 
digital content has corresponding license acquisition information including a location of a 
license provider for providing the license, the method further comprising determining, by the 
license requestor, the location of the license provider from the license acquisition 
information, wherein contacting the license provider comprises contacting the license 
provider at the determined location. 
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108. (Previously Presented) The method of claim 106 wherein the 
license provider is a license server attached to a communications network, and wherein 
contacting the license server occurs over the communications network. 

109. (Previously Presented) The method of claim 108 wherein 
sending the license request and issuing the generated license occur over the established 
network connection. 

110. (Previously Presented) The method of claim 106 wherein the 
license request originates from a device including a security portion, and wherein sending the 
license request comprises sending license request information to the license provider, the 
license request information including: 

an identification of the device; 

an identification of the license requestor; 

a public key of the device; 

a version number of the security portion; 

a certificate with a digital signature from a certifying authority certifying the 
security portion; 

a content ID that identifies the digital content; and 

a key ID that identifies a decryption key (KD) for decrypting the digital 

content. 
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111. (Previously Presented) The method of claim 1 1 0 wherein 
generating the requested license comprises generating the requested license based on the 
license request information. 

1 12. (Previously Presented) The method of claim 106 wherein the 
license request originates from a device including a security portion, wherein sending the 
license request comprises sending license request information to the license provider, the 
license request information including a version number of the security portion, and wherein 
checking the license request for validity includes checking the version number of the security 
portion to determine whether such version number is current. 

113. (Previously Presented) The method of claim 1 12 further 
comprising refusing to issue the requested license until the security portion is upgraded to a 
version having a current version number. 

1 14. (Previously Presented) The method of claim 106 wherein the 
license request originates from a device including a security portion, wherein sending the 
license request comprises sending license request information to the license provider, the 
license request information including a certificate with a digital signature from a certifying 
authority certifying the security portion, and wherein checking the license request for validity 
includes checking the certificate with the digital signature from the certifying authority to 
determine whether such digital signature has been modified. 
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115. (Previously Presented) The method of claim 106 wherein 
sending the license request comprises sending license request information to the license 
provider, the license request information including an identification of the license requestor, 
and wherein checking the license request for validity includes checking the identified license 
requestor against a list of license requestors to determine whether such license requestor is 
license-able. 

116. (Previously Presented) The method of claim 106 wherein the 
license request originates from a device, wherein sending the license request comprises 
sending license request information to the license provider, the license request information 
including an identification of the device, and wherein checking the license request for validity 
includes checking the identified device against a list of devices to determine whether such 
device is license-able. 

1 1 7. (Previously Presented) The method of claim 106 wherein 
sending the license request comprises sending license request information to the license 
provider, the license request information including a content ID that identifies the digital 
content, the method further comprising locating, by the license provider, license provider 
information corresponding to the digital content based on the content ID, the license provider 
information including a decryption key (KD) for decrypting the digital content, license data 
regarding types of licenses available for the digital content, and terms and conditions for each 
type of license 
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118. (Previously Presented) The method of claim 1 1 7 further 
comprising transmitting, from the license provider to the license requestor, information on the 
types of licenses available for the digital content. 

119. (Previously Presented) The method of claim 1 1 7 wherein 
generating the requested license comprises generating a license including: 

the content ID of the digital content; and 
the terms and conditions of the license. 

120. (Previously Presented) The method of claim 119 wherein the 
license request originates from a device having a public key, and wherein generating the 
requested license comprises generating a license further including the decryption key (KD) 
for decrypting the digital content, such decryption key (KD) being encrypted with the public 
key of the device. 

121. (Previously Presented) The method of claim 1 1 9 wherein 
generating the requested license comprises generating a license further including a digital 
signature from the license provider based on at least a portion of the generated license, the 
digital signature being encrypted with a license provider private key. 

122. (Previously Presented) The method of claim 1 19 wherein 
generating the requested license comprises generating a license further including a certificate 
indicating that the license provider has the authority to issue the generated license. 
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123. (Previously Presented) The method of claim 106 wherein 
sending the license request comprises sending license request information to the license 
provider, the license request information including a key ID that identifies a decryption key 
(KD) for decrypting the digital content, the method further comprising locating, by the 
license provider, the decryption key (KD) for decrypting the digital content based on the key 
ID. 

124. (Previously Presented) The method of claim 123 wherein the 
license request originates from a device having a public key, and wherein generating the 
requested license comprises generating a license including the decryption key (KD) for 
decrypting the digital content, such decryption key (KD) being encrypted with the public key 
of the device. 

125. (Previously Presented) The method of claim 106 wherein 
negotiating the terms and conditions includes providing, by the license requestor to the 
license provider, further information as defined by the license provider. 

126. (Previously Presented) The method of claim 106 wherein 
negotiating the terms and conditions includes determining a payment instrument for paying 
for the requested license. 
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127. (Previously Presented) The method of claim 106 wherein 
negotiating the terms and conditions includes determining a payment schedule for paying for 
the requested license. 

128. (Previously Presented) The method of claim 106 wherein 
generating the requested license comprises generating the requested license based on the 
license request. 

129. (Previously Presented) The method of claim 106 further 
comprising maintaining, by the license provider, a record of the issued license. 

130. (Previously Presented) The method of claim 129 further 
comprising providing, by the license provider to the license requestor, a re-issue of the issued 
license based upon the record of the issued license and upon request by the license requestor, 
wherein the re-issue can replace the issued license in the case where the issued license is lost. 

131. (Previously Presented) The method of claim 1 06 further 
comprising placing, by the license requestor, the issued license in a license storage location. 

132. (Previously Presented) The method of claim 106 wherein 
issuing the generated license comprises issuing the generated license in a form separate from 
the digital content. 
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133. (Previously Presented) The digital license as obtained by the 
method of claim 106. 

1 34. (Previously Presented) The license of claim 133 for rendering a 
piece of digital content on a device having a public key and a private key, the digital content 
having a content ID, being encrypted, and being decryptable with a decryption key (KD), the 
digital license comprising: 

the content ID of the digital content; 

a license rights description specifying terms and conditions that must be 
satisfied before the digital content may be rendered; and 

the decryption key (KD) for decrypting the digital content, the decryption key 
being encrypted with the public key of the device (PU(KD)), wherein the device can apply 
the private key thereof to (PU(KD)) to obtain the decryption key (KD). 

135. (Previously Presented) The license of claim 134 wherein the 
license rights description is encrypted with the decryption key (KD). 

136. (Previously Presented) The license of claim 134 further 
comprising a digital signature for validating the license. 

137. (Previously Presented) The license of claim 136 wherein the 
license is provided by a license server having a private key and a public key, and wherein the 
digital signature is encrypted with the private key of the license server. 
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138. (Previously Presented) The license of claim 136 wherein the 
digital signature is based at least in part on the license rights description, wherein alteration of 
the license rights description prevents the digital signature from validating the license. 

139. (Previously Presented) The license of claim 136 wherein the 
digital signature is based at least in part on (PU(KD)), wherein alteration of (PU(KD)) 
prevents the digital signature from validating the license. 

140. (Previously Presented) The license of claim 134 wherein the 
license rights description is written in a predetermined license language, the digital license 
further comprising a license language tag specifying the license language. 

141. (Previously Presented) The license of claim 134 wherein the 
license is provided by a license server and the digital content is provided by a content server, 
the license further comprising a certificate from the content server indicating that the license 
server has authority from the content server to provide the license. 

142. (Previously Presented) The license of claim 141 wherein the 
license server has a public key and a private key, and wherein the certificate includes the 
public key of the license server. 
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143. (Previously Presented) The license of claim 142 wherein the 
content server has a public key and a private key, wherein the certificate is signed with the 
private key of the content server, and wherein the device obtains the public key of the content 
server to decrypt the encrypted signature. 

144. (Previously Presented) The license of claim 134 wherein the 
license is provided by a license server authorized by a root source to provide the license, the 
license further comprising a certificate from the root source indicating that the license server 
has authority from the root source to provide the license. 

145. (Previously Presented) The license of claim 144 wherein the 
license server has a public key and a private key, and wherein the certificate includes the 
public key of the license server. 

146. (Previously Presented) The license of claim 145 wherein the 
root source has a public key and a private key, wherein the certificate is signed with the 
private key of the root source, and wherein the device obtains the public key of the root 
source to decrypt the encrypted signature. 

147. (Previously Presented) The license of claim 134 wherein the 
license is provided by a license server authorized by an intermediary source to provide the 
license, the intermediary source in turn being authorized by a root source to authorize the 
license server, the license further comprising a first certificate from the root source indicating 
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that the intermediary source has authority from the root source to authorize the license server, 
and a second certificate from the intermediary source indicating that the license server has 
authority from the intermediary source to provide the license. 

148. (Previously Presented) The license of claim 147 wherein the 
license server has a public key and a private key, wherein the intermediary source has a 
public key and a private key, wherein the first certificate includes the public key of the 
intermediary source, and wherein the second certificate includes the public key of the license 
server. 

149. (Previously Presented) The license of claim 148 wherein the 
root source has a public key and a private key, wherein the first certificate is signed with the 
private key of the root source, wherein the second certificate is signed with the private key of 
the intermediary source, and wherein the device obtains the public key of the root source to 
decrypt the encrypted signature of the first certificate, and wherein the device obtains the 
public key of the intermediary source from the first certificate to decrypt the encrypted 
signature of the second certificate. 

1 50. (Previously Presented) A method for a license requestor to 
obtain a digital license for rendering a piece of digital content comprising: 

contacting a license provider; 

sending a license request for the license to the contacted license provider, the 
license provider thereafter checking the license request for validity; 
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negotiating terms and conditions for the requested license with the license 
provider, the license provider thereafter generating the requested license; and 
receiving the generated license as issued by the license provider. 



151. (Previously Presented) The method of claim 1 50 wherein the 
digital content has corresponding license acquisition information including a location of a 
license provider for providing the license, the method further comprising determining the 
location of the license provider from the license acquisition information, wherein contacting 
the license provider comprises contacting the license provider at the determined location. 

1 52. (Previously Presented) The method of claim 150 wherein the 
license provider is a license server attached to a communications network, and wherein 
contacting the license server occurs over the communications network. 

153. (Previously Presented) The method of claim 1 52 wherein 
sending the license request and receiving the generated license occur over the established 
network connection. 



1 54. (Previously Presented) The method of claim 150 wherein the 
license request originates from a device including a security portion, and wherein sending the 
license request comprises sending license request information to the licenseprovider, the 
license request information including: 

an identification of the device; 
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an identification of the license requestor; 



a public key of the device; 



a version number of the security portion; 



a certificate with a digital signature from a certifying authority certifying the 



security portion; 



a content ID that identifies the digital content; and 



a key ID that identifies a decryption key (KD) for decrypting the digital 



content. 



155. (Previously Presented) 



The method of claim 150 wherein the 



license request originates from a device including a security portion, wherein sending the 
license request comprises sending license request information to the license provider, the 
license request information including a version number of the security portion, the license 
provider checking the version number of the security portion to determine whether such 
version number is current. 



license request originates from a device including a security portion, wherein sending the 
license request comprises sending license request information to the license provider, the 
license request information including a certificate with a digital signature from a certifying 
authority certifying the security portion, license provider checking the certificate with the 
digital signature from the certifying authority to determine whether such digital signature has 
been modified. 



1 56. (Previously Presented) 



The method of claim 150 wherein the 
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157. (Previously Presented) The method of claim 150 wherein 
sending the license request comprises sending license request information to the license 
provider, the license request information including an identification of the license requestor, 
the license provider checking the identified license requestor against a list of license 
requestors to determine whether such license requestor is license-able. 

158. (Previously Presented) The method of claim 1 50 wherein the 
license request originates from a device, wherein sending the license request comprises 
sending license request information to the license provider, the license request information 
including an identification of the device, the license provider checking the identified device 
against a list of devices to determine whether such device is license-able. 

159. (Previously Presented) The method of claim 1 50 wherein 
sending the license request comprises sending license request information to the license 
provider, the license request information including a content ID that identifies the digital 
content, the license provider locating license provider information corresponding to the 
digital content based on the content ID. 

160. (Previously Presented) The method of claim 159 wherein the 
license provider information includes a decryption key (KD) for decrypting the digital 
content, license data regarding types of licenses available for the digital content, and terms 
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and conditions for each type of license, the method further comprising receiving from the 
license provider information on the types of licenses available for the digital content. 

161. (Previously Presented) The method of claim 159 wherein 
receiving the requested license comprises receiving a license including: 

the content ID of the digital content; and 
the terms and conditions of the license. 

162. (Previously Presented) The method of claim 161 wherein the 
license request originates from a device having a public key, and wherein receiving the 
requested license comprises receiving a license further including the decryption key (KD) for 
decrypting the digital content, such decryption key (KD) being encrypted with the public key 
of the device. 

163. (Previously Presented) The method of claim 161 wherein 
receiving the requested license comprises receiving a license further including a digital 
signature from the license provider based on at least a portion of the generated license, the 
digital signature being encrypted with a license provider private key. 

164. (Previously Presented) The method of claim 161 wherein 
receiving the requested license comprises receiving a license further including a certificate 
indicating that the license provider has the authority to issue the generated license. 
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165. (Previously Presented) The method of claim 150 wherein 
sending the license request comprises sending license request information to the license 
provider, the license request information including a key ID that identifies a decryption key 
(KD) for decrypting the digital content, the license provider locating the decryption key (KD) 
based on the key ID. 



166. (Previously Presented) The method of claim 165 wherein the 
license request originates from a device having a public key, and wherein receiving the 
requested license comprises receiving a license including the decryption key (KD) for 
decrypting the digital content, such decryption key (KD) being encrypted with the public key 
of the device. 



167. (Previously Presented) The method of claim 1 50 wherein 
negotiating the terms and conditions includes providing further information to the license 
provider as defined thereby. 

168. (Previously Presented) The method of claim 1 50 wherein 
negotiating the terms and conditions includes determining a payment instrument for paying 
for the requested license. 



169. (Previously Presented) The method of claim 1 50 wherein 
negotiating the terms and conditions includes determining a payment schedule for paying for 
the requested license. 

Page 17 of 51 



DOCKET NO.: MSFT-0092 
Application No.: 09/482,725 



PATENT 



1 70. (Previously Presented) The method of claim 1 50 wherein the 
license provider maintains a record of the issued license, the method further comprising 
receiving from the license provider upon request a re-issue of the issued license based upon 
the record of the issued license, wherein the re-issue can replace the issued license in the case 
where the issued license is lost. 

171. (Previously Presented) The method of claim 150 further 
comprising placing the issued license in a license storage location. 

1 72. (Previously Presented) The method of claim 1 50 wherein the 
receiving the license step comprises receiving the license in a form separate from the digital 
content. 

1 73 . (Previously Presented) A method for a license provider to 
provide a digital license for rendering a piece of digital content comprising: 

receiving a request for the license from a license requestor having a public 

key; 

checking the license request for validity; 

negotiating terms and conditions for the requested license with the license 

requestor; 
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generating the requested license including a decryption key (KD) for 
decrypting the digital content, such decryption key (KD) being encrypted with the public key 
of the license requestor; and 

issuing the generated license to the license requestor. 

174. (Previously Presented) The method of claim 173 wherein the 
license provider is a license server attached to a communications network, and wherein 
receiving the license request occurs over the communications network. 

1 75 . (Previously Presented) The method of claim 1 74 wherein 
issuing the generated license occur over the communications network. 

176. (Previously Presented) The method of claim 173 wherein the 
license request originates from a device including a security portion, and wherein receiving 
the license request comprises receiving license request information including: 

an identification of the device; 

an identification of the license requestor; 

a public key of the device; 

a version number of the security portion; 

a certificate with a digital signature from a certifying authority certifying the 
security portion; 

a content ID that identifies the digital content; and 
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a key ID that identifies a decryption key (KD) for decrypting the digital 

content. 

1 77. (Previously Presented) The method of claim 1 76 wherein 
generating the requested license comprises generating the requested license based on the 
license request information. 

1 78. (Previously Presented) The method of claim 1 73 wherein the 
license request originates from a device including a security portion, wherein receiving the 
license request comprises receiving license request information including a version number 
of the security portion, and wherein checking the license request for validity includes 
checking the version number of the security portion to determine whether such version 
number is current. 

179. (Previously Presented) The method of claim 1 78 further 
comprising refusing to issue the requested license until the security portion is upgraded to a 
version having a current version number. 

180. (Previously Presented) The method of claim 173 wherein the 
license request originates from a device including a security portion, wherein receiving the 
license request comprises receiving license request information including a certificate with a 
digital signature from a certifying authority certifying the security portion, and wherein 
checking the license request for validity includes checking the certificate with the digital 
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signature from the certifying authority to determine whether such digital signature has been 
modified. 

181. (Previously Presented) The method of claim 1 73 wherein 
receiving the license request comprises receiving license request information including an 
identification of the license requestor, and wherein checking the license request for validity 
includes checking the identified license requestor against a list of license requestors to 
determine whether such license requestor is license-able. 

182. (Previously Presented) The method of claim 173 wherein the 
license request originates from a device, wherein receiving the license request comprises 
receiving license request information including an identification of the device, and wherein 
checking the license request for validity includes checking the identified device against a list 
of devices to determine whether such device is license-able. 

183. (Previously Presented) The method of claim 173 wherein 
receiving the license request comprises receiving license request information including a 
content ID that identifies the digital content, the method further comprising locating license 
provider information corresponding to the digital content based on the content ID, the license 
provider information including a decryption key (KD) for decrypting the digital content, 
license data regarding types of licenses available for the digital content, and terms and 
conditions for each type of license. 
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1 84. (Previously Presented) The method of claim 1 83 further 
comprising transmitting to the license requestor information on the types of licenses available 
for the digital content. 

1 85. (Previously Presented) The method of claim 1 83 wherein 
generating the requested license comprises generating a license including: 

the content ID of the digital content; and 
the terms and conditions of the license. 

1 86. (Previously Presented) The method of claim 1 85 wherein the 
license request originates from a device having a public key, and wherein generating the 
requested license comprises generating a license further including the decryption key (KD) 
for decrypting the digital content, such decryption key (KD) being encrypted with the public 
key of the device. 

1 87. (Previously Presented) The method of claim 1 85 wherein 
generating the requested license comprises generating a license further including a digital 
signature from the license provider based on at least a portion of the generated license, the 
digital signature being encrypted with a license provider private key. 

1 88. (Previously Presented) The method of claim 1 85 wherein 
generating the requested license comprises generating a license further including a certificate 
indicating that the license provider has the authority to issue the generated license. 
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189. (Previously Presented) The method of claim 173 wherein 
receiving the license request comprises receiving license request information including a key 
ID that identifies a decryption key (KD) for decrypting the digital content, the method further 
comprising locating the decryption key (KD) for decrypting the digital content based on the 

^key ID. 

190. (Previously Presented) The method of claim 1 89 wherein the 
license request originates from a device having a public key, and wherein generating the 
requested license comprises generating a license including the decryption key (KD) for 
decrypting the digital content, such decryption key (KD) being encrypted with the public key 
of the device. 



191. (Previously Presented) The method of claim 1 73 wherein 
negotiating the terms and conditions includes receiving further information as defined by the 
license provider. 



192. (Previously Presented) The method of claim 173 wherein 
negotiating the terms and conditions includes determining a payment instrument for paying 
for the requested license. 
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193. (Previously Presented) The method of claim 173 wherein 
negotiating the terms and conditions includes determining a payment schedule for paying for 
the requested license. 

194. (Previously Presented) The method of claim 1 73 wherein 
generating the requested license comprises generating the requested license based on the 
license request. 

195. (Previously Presented) The method of claim 173 further 
comprising maintaining a record of the issued license. 

196. (Previously Presented) The method of claim 195 further 
comprising providing to the license requestor upon request a re-issue of the issued license 
based upon the record of the issued license, wherein the re-issue can replace the issued 
license in the case where the issued license is lost. 

197. (Previously Presented) The method of claim 173 wherein the 
issuing the license step comprises issuing the license in a form separate from the digital 
content. 

198. (Previously Presented) A digital license for rendering a piece of 
digital content on a device having a public key and a private key, the digital content having a 
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content ID, being encrypted, and being decryptable with a decryption key (KD), the digital 
license comprising: 

the content ID of the digital content; 

a license rights description specifying terms and conditions that must be 
satisfied before the digital content may be rendered; and 

the decryption key (KD) for decrypting the digital content, the decryption key 
being encrypted with the public key of the device (PU(KD)), wherein the device can apply 
the private key thereof to (PU(KD)) to obtain the decryption key (KD). 

199. (Previously Presented) The license of claim 198 wherein the 
license rights description is encrypted with the decryption key (KD). 

200. (Previously Presented) The license of claim 198 further 
comprising a digital signature for validating the license. 

201 . (Previously Presented) The license of claim 200 wherein the 
license is provided by a license server having a private key and a public key, and wherein the 
digital signature is encrypted with the private key of the license server. 

202. (Previously Presented) The license of claim 200 wherein the 
digital signature is based at least in part on the license rights description, wherein alteration of 
the license rights description prevents the digital signature from validating the license. 
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203. (Previously Presented) The license of claim 200 wherein the 
digital signature is based at least in part on (PU(KD)), wherein alteration of (PU(KD)) 
prevents the digital signature from validating the license. 

204. (Previously Presented) The license of claim 198 wherein the 
license rights description is written in a predetermined license language, the digital license 
further comprising a license language tag specifying the license language. 

205. (Previously Presented) The license of claim 198 wherein the 
license is provided by a license server and the digital content is provided by a content server, 
the license further comprising a certificate from the content server indicating that the license 
server has authority from the content server to provide the license. 

206. (Previously Presented) The license of claim 205 wherein the 
license server has a public key and a private key, and wherein the certificate includes the 
public key of the license server. 

207. (Previously Presented) The license of claim 206 wherein the 
content server has a public key and a private key, wherein the certificate is signed with the 
private key of the content server, and wherein the device obtains the public key of the content 
server to decrypt the encrypted signature. 
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208. (Previously Presented) The license of claim 198 wherein the 
license is provided by a license server authorized by a root source to provide the license, the 
license further comprising a certificate from the root source indicating that the license server 
has authority from the root source to provide the license. 

209. (Previously Presented) The license of claim 208 wherein the 
license server has a public key and a private key, and wherein the certificate includes the 
public key of the license server. 

210. (Previously Presented) The license of claim 209 wherein the 
root source has a public key and a private key, wherein the certificate is signed with the 
private key of the root source, and wherein the device obtains the public key of the root 
source to decrypt the encrypted signature. 

211. (Previously Presented) The license of claim 198 wherein the 
license is provided by a license server authorized by an intermediary source to provide the 
license, the intermediary source in turn being authorized by a root source to authorize the 
license server, the license further comprising a first certificate from the root source indicating 
that the intermediary source has authority from the root source to authorize the license server, 
and a second certificate from the intermediary source indicating that the license server has 
authority from the intermediary source to provide the license. 
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212. (Previously Presented) The license of claim 211 wherein the 
license server has a public key and a private key, wherein the intermediary source has a 
public key and a private key, wherein the first certificate includes the public key of the 
intermediary source, and wherein the second certificate includes the public key of the license 
server. 

213. (Previously Presented) The license of claim 212 wherein the 
root source has a public key and a private key, wherein the first certificate is signed with the 
private key of the root source, wherein the second certificate is signed with the private key of 
the intermediary source, and wherein the device obtains the public key of the root source to 
decrypt the encrypted signature of the first certificate, and wherein the device obtains the 
public key of the intermediary source from the first certificate to decrypt the encrypted 
signature of the second certificate. 

214. (Previously Presented) The license of claim 198 in a form 
separate from the digital content. 

215. (Previously Presented) A computer-readable medium having 
stored thereon a data structure corresponding to a digital license for rendering a piece of 
digital content on a device having a public key and a private key, the digital content having a 
content ID, being encrypted, and being decryptable with a decryption key (KD), the data 
structure comprising: 

a first data field containing the content ID of the digital content; 
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a second data field containing a license rights description specifying terms and 
conditions that must be satisfied before the digital content may be rendered; and 

a third data field containing the decryption key (KD) for decrypting the digital 
content, the decryption key being encrypted with the public key of the device (PU(KD)), 
wherein the device can apply the private key thereof to (PU(KD)) to obtain the decryption 
key (KD). 

216. (Previously Presented) The data structure of claim 215 wherein 
the license rights description is encrypted with the decryption key (KD). 

217. (Previously Presented) The data structure of claim 215 further 
comprising a fourth data field containing a digital signature for validating the license. 

218. (Previously Presented) The data structure of claim 2 1 7 wherein 
the data structure is provided by a license server having a private key and a public key, and 
wherein the digital signature is encrypted with the private key of the license server. 

219. (Previously Presented) The data structure of claim 2 1 7 wherein 
the digital signature is based at least in part on the license rights description, wherein 
alteration of the license rights description prevents the digital signature from validating the 
license. 
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220. (Previously Presented) The data structure of claim 2 1 7 wherein 
the digital signature is based at least in part on (PU(KD)), wherein alteration of (PU(KD)) 
prevents the digital signature from validating the license. 

22 1 . (Previously Presented) The data structure of claim 2 1 5 wherein 
the license rights description is written in a predetermined license language, the digital 
license further comprising a fourth data field containing a license language tag specifying the 
license language. 

222. (Previously Presented) The data structure of claim 2 1 5 wherein 
the data structure is provided by a license server and the digital content is provided by a 
content server, the data structure further comprising a fourth data field containing a certificate 
from the content server indicating that the license server has authority from the content server 
to provide the data structure. 

223. (Previously Presented) The data structure of claim 222 wherein 
the license server has a public key and a private key, and wherein the certificate includes the 
public key of the license server. 

224. (Previously Presented) The data structure of claim 223 wherein 
the content server has a public key and a private key, wherein the certificate is signed with 
the private key of the content server, and wherein the device obtains the public key of the 
content server to decrypt the encrypted signature. 

Page 30 of 51 



DOCKET NO.: MSFT-0092 
Application No.: 09/482,725 



PATENT 



225. (Previously Presented) The data structure of claim 215 wherein 
the data structure is provided by a license server authorized by a root source to provide the 
license, the license further comprising a fourth data field containing a certificate from the root 
source indicating that the license server has authority from the root source to provide the 
license. 

226. (Previously Presented) The data structure of claim 225 wherein 
the license server has a public key and a private key, and wherein the certificate includes the 
public key of the license server. 

227. (Previously Presented) The data structure of claim 226 wherein 
the root source has a public key and a private key, wherein the certificate is signed with the 
private key of the root source, and wherein the device obtains the public key of the root 
source to decrypt the encrypted signature. 

228. (Previously Presented) The data structure of claim 215 wherein 
the data structure is provided by a license server authorized by an intermediary source to 
provide the license, the intermediary source in turn being authorized by a root source to 
authorize the license server, the license further comprising a fourth data field containing a 
first certificate from the root source indicating that the intermediary source has authority from 
the root source to authorize the license server, and a fifth data field containing a second 
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certificate from the intermediary source indicating that the license server has authority from 
the intermediary source to provide the license. 

229. (Previously Presented) The data structure of claim 228 wherein 
the license server has a public key and a private key, wherein the intermediary source has a 
public key and a private key, wherein the first certificate includes the public key of the 
intermediary source, and wherein the second certificate includes the public key of the license 
server. 

230. (Previously Presented) The data structure of claim 229 wherein 
the root source has a public key and a private key, wherein the first certificate is signed with 
the private key of the root source, wherein the second certificate is signed with the private 
key of the intermediary source, and wherein the device obtains the public key of the root 
source to decrypt the encrypted signature of the first certificate, and wherein the device 
obtains the public key of the intermediary source from the first certificate to decrypt the 
encrypted signature of the second certificate. 

23 1 . (Previously Presented) The data structure of claim 215 separate 
from the digital content. 

232. (Previously Presented) A computer-readable medium having 
computer-executable instructions for performing a method for a license requestor to obtain a 
digital license for rendering a piece of digital content comprising: 
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contacting a license provider; 

sending a license request for the license to the contacted license provider, the 
license provider thereafter checking the license request for validity; 

negotiating terms and conditions for the requested license with the license 
provider, the license provider thereafter generating the requested license; and 

receiving the generated license as issued by the license provider. 

233. (Previously Presented) The computer-readable medium of claim 
232 wherein the digital content has corresponding license acquisition information including a 
location of a license provider for providing the license, the method further comprising 
determining the location of the license provider from the license acquisition information, 
wherein contacting the license provider comprises contacting the license provider at the 
determined location. 



234. (Previously Presented) The computer-readable medium of claim 
232 wherein the license provider is a license server attached to a communications network, 
and wherein contacting the license server occurs over the communications network. 



235. (Previously Presented) The computer-readable medium of claim 
234 wherein sending the license request and receiving the generated license occur over the 
established network connection. 
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236. (Previously Presented) The computer-readable medium of claim 
232 wherein the license request originates from a device including a security portion, and 
wherein sending the license request comprises sending license request information to the 
license provider, the license request information including: 

an identification of the device; 

an identification of the license requestor; 

a public key of the device; 

a version number of the security portion; 

a certificate with a digital signature from a certifying authority certifying the 
security portion; 

a content ID that identifies the digital content; and 

a key ID that identifies a decryption key (KD) for decrypting the digital 

content. 

237. (Previously Presented) The computer-readable medium of claim 
232 wherein the license request originates from a device including a security portion, wherein 
sending the license request comprises sending license request information to the license 
provider, the license request information including a version number of the security portion, 
the license provider checking the version number of the security portion to determine whether 
such version number is current. 

238. (Previously Presented) The computer-readable medium of claim 
232 wherein the license request originates from a device including a security portion, wherein 
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sending the license request comprises sending license request information to the license 
provider, the license request information including a certificate with a digital signature from a 
certifying authority certifying the security portion, license provider checking the certificate 
with the digital signature from the certifying authority to determine whether such digital 
signature has been modified. 

239. (Previously Presented) The computer-readable medium of claim 
232 wherein sending the license request comprises sending license request information to the 
license provider, the license request information including an identification of the license 
requestor, the license provider checking the identified license requestor against a list of 
license requestors to determine whether such license requestor is license-able. 

240. (Previously Presented) The computer-readable medium of claim 
232 wherein the license request originates from a device, wherein sending the license request 
comprises sending license request information to the license provider, the license request 
information including an identification of the device, the license provider checking the 
identified device against a list of devices to determine whether such device is license-able. 

241 . (Previously Presented) The computer-readable medium of claim 
232 wherein sending the license request comprises sending license request information to the 
license provider, the license request information including a content ID that identifies the 
digital content, the license provider locating license provider information corresponding to 
the digital content based on the content ID. 
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242. (Previously Presented) The computer-readable medium of claim 
241 wherein the license provider information includes a decryption key (KD) for decrypting 
the digital content, license data regarding types of licenses available for the digital content, 
and terms and conditions for each type of license, the method further comprising receiving 
from the license provider information on the types of licenses available for the digital 
content. 

243 . (Previously Presented) The computer-readable medium of claim 
241 wherein receiving the requested license comprises receiving a license including: 

the content ID of the digital content; and 
the terms and conditions of the license. 

244. (Previously Presented) The computer-readable medium of claim 
243 wherein the license request originates from a device having a public key, and wherein 
receiving the requested license comprises receiving a license further including the decryption 
key (KD) for decrypting the digital content, such decryption key (KD) being encrypted with 
the public key of the device. 

245. (Previously Presented) The computer-readable medium of claim 
243 wherein receiving the requested license comprises receiving a license further including a 
digital signature from the license provider based on at least a portion of the generated license, 
the digital signature being encrypted with a license provider private key. 
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246. (Previously Presented) The computer-readable medium of claim 
243 wherein receiving the requested license comprises receiving a license further including a 
certificate indicating that the license provider has the authority to issue the generated license. 

247. (Previously Presented) The computer-readable medium of claim 
232 wherein sending the license request comprises sending license request information to the 
license provider, the license request information including a key ID that identifies a 
decryption key (KD) for decrypting the digital content, the license provider locating the 
decryption key (KD) based on the key ID. 

248. (Previously Presented) The computer-readable medium of claim 
247 wherein the license request originates from a device having a public key, and wherein 
receiving the requested license comprises receiving a license including the decryption key 
(KD) for decrypting the digital content, such decryption key (KD) being encrypted with the 
public key of the device. 

249. (Previously Presented) The computer-readable medium of claim 
232 wherein negotiating the terms and conditions includes providing further information to 
the license provider as defined thereby. 
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250. (Previously Presented) The computer-readable medium of claim 
232 wherein negotiating the terms and conditions includes determining a payment instrument 
for paying for the requested license. 



25 1 . (Previously Presented) The computer-readable medium of claim 
232 wherein negotiating the terms and conditions includes determining a payment schedule 
for paying for the requested license. 



252. (Previously Presented) The computer-readable medium of claim 
232 wherein the license provider maintains a record of the issued license, the method further 
comprising receiving from the license provider upon request a re-issue of the issued license 
based upon the record of the issued license, wherein the re-issue can replace the issued 
license in the case where the issued license is lost. 



253. (Previously Presented) The computer-readable medium of claim 
232 further comprising placing the issued license in a license storage location. 

254. (Previously Presented) The computer-readable medium of claim 
232 wherein the receiving the license step comprises receiving the license in a form separate 
from the digital content. 
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255. (Previously Presented) . A computer-readable medium having 
computer-executable instructions for performing a method for a license provider to provide a 
digital license for rendering a piece of digital content comprising: 

receiving a request for the license from a license requestor; 
checking the license request for validity; 

negotiating terms and conditions for the requested license with the license 

requestor; 

generating the requested license; and 

issuing the generated license to the license requestor. 

256. (Previously Presented) The computer-readable medium of claim 

255 wherein the license provider is a license server attached to a communications network, 
and wherein receiving the license request occurs over the communications network. 

257. (Previously Presented) The computer-readable medium of claim 

256 wherein issuing the generated license occur over the communications network. 

258. (Previously Presented) The computer-readable medium of claim 
255 wherein the license request originates from a device including a security portion, and 
wherein receiving the license request comprises receiving license request information 
including: 

an identification of the device; 

an identification of the license requestor; 
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a public key of the device; 



a version number of the security portion; 



a certificate with a digital signature from a certifying authority certifying the 



security portion; 



a content ID that identifies the digital content; and 



a key ID that identifies a decryption key (KD) for decrypting the digital 



content. 



259. (Previously Presented) 



The computer-readable medium of claim 



258 wherein generating the requested license comprises generating the requested license 
based on the license request information. 



255 wherein the license request originates from a device including a security portion, wherein 
receiving the license request comprises receiving license request information including a 
version number of the security portion, and wherein checking the license request for validity 
includes checking the version number of the security portion to determine whether such 
version number is current. 



260 further comprising refusing to issue the requested license until the security portion is 
upgraded to a version having a current version number. 



260. (Previously Presented) 



The computer-readable medium of claim 



26 1 . (Previously Presented) 



The computer-readable medium of claim 
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262. (Previously Presented) The computer-readable medium of claim 
255 wherein the license request originates from a device including a security portion, wherein 
receiving the license request comprises receiving license request information including a 
certificate with a digital signature from a certifying authority certifying the security portion, 
and wherein checking the license request for validity includes checking the certificate with 
the digital signature from the certifying authority to determine whether such digital signature 
has been modified. 

263. (Previously Presented) The computer-readable medium of claim 
255 wherein receiving the license request comprises receiving license request information 
including an identification of the license requestor, and wherein checking the license request 
for validity includes checking the identified license requestor against a list of license 
requestors to determine whether such license requestor is license-able. 

264. (Previously Presented) The computer-readable medium of claim 
255 wherein the license request originates from a device, wherein receiving the license 
request comprises receiving license request information including an identification of the 
device, and wherein checking the license request for validity includes checking the identified 
device against a list of devices to determine whether such device is license-able. 

265. (Previously Presented) The computer-readable medium of claim 
255 wherein receiving the license request comprises receiving license request information 
including a content ID that identifies the digital content, the method further comprising 
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locating license provider information corresponding to the digital content based on the 
content ID, the license provider information including a decryption key (KD) for decrypting 
the digital content, license data regarding types of licenses available for the digital content, 
and terms and conditions for each type of license. 

266. (Previously Presented) The computer-readable medium of claim 
265 further comprising transmitting to the license requestor information on the types of 
licenses available for the digital content. 

267. (Previously Presented) The computer-readable medium of claim 
265 wherein generating the requested license comprises generating a license including: 

the content ID of the digital content; and 
the terms and conditions of the license. 

268. (Previously Presented) The computer-readable medium of claim 
267 wherein the license request originates from a device having a public key, and wherein 
generating the requested license comprises generating a license further including the 
decryption key (KD) for decrypting the digital content, such decryption key (KD) being 
encrypted with the public key of the device. 

269. (Previously Presented) The computer-readable medium of claim 
267 wherein generating the requested license comprises generating a license further including 
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a digital signature from the license provider based on at least a portion of the generated 
license, the digital signature being encrypted with a license provider private key. 

270. (Previously Presented) The computer-readable medium of claim 
267 wherein generating the requested license comprises generating a license further including 
a certificate indicating that the license provider has the authority to issue the generated 
license. 

271. (Previously Presented) The computer-readable medium of claim 
255 wherein receiving the license request comprises receiving license request information 
including a key ID that identifies a decryption key (KD) for decrypting the digital content, the 
method further comprising locating the decryption key (KD) for decrypting the digital 
content based on the key ID. 

272. (Previously Presented) The computer-readable medium of claim 
271 wherein the license request originates from a device having a public key, and wherein 
generating the requested license comprises generating a license including the decryption key 
(KD) for decrypting the digital content, such decryption key (KD) being encrypted with the 
public key of the device. 

273. (Previously Presented) The computer-readable medium of claim 
255 wherein negotiating the terms and conditions includes receiving further information as 
defined by the license provider. 
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274. (Previously Presented) The computer-readable medium of claim 
255 wherein negotiating the terms and conditions includes determining a payment instrument 
for paying for the requested license. 

275. (Previously Presented) The computer-readable medium of claim 
255 wherein negotiating the terms and conditions includes determining a payment schedule 
for paying for the requested license. 

276. (Previously Presented) The computer-readable medium of claim 
255 wherein generating the requested license comprises generating the requested license 
based on the license request. 

277. (Previously Presented) The computer-readable medium of claim 
255 further comprising maintaining a record of the issued license. 

278. (Previously Presented) The computer-readable medium of claim 
277 further comprising providing to the license requestor upon request a re-issue of the issued 
license based upon the record of the issued license, wherein the re-issue can replace the 
issued license in the case where the issued license is lost. 
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279. (Previously Presented) The computer-readable medium of claim 
255 wherein the issuing the license step comprises issuing the license in a form separate from 
the digital content. 



280. (New) A method for a server to provide to a client computer a digital 
license of one or more rights to render digital content, the digital content encrypted with a 
decryption key, the method comprising: 

receiving, from the client computer, a license request, the license request 
containing a key identifier that identifies the decryption key; 

responsive to the request, generating a license response including a digital 
rights license, the decryption key identified by the key identifier, and at least one server 
certificate to be used by the client computer to validate the license response; and 

transmitting the license response to the client computer. 



28 1 . (New) The method of claim 280 wherein the license request includes a 
content identifier, and a list containing one or more requested rights, and wherein the 
generating further comprises: 

generating the digital rights license based on the one or more requested rights. 



282. (New) The method of claim 280 wherein the license request includes a 
client certificate associated with the client computer. 



283. (New) The method of claim 280 wherein transmitting comprises: 
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transmitting the license response to the client computer as part of an HTML 

page. 



284. (New) The method of claim 280 wherein generating comprises: 

at least partially encrypting one or more elements in the license response; and 

encoding the license response. 



285. (New) The method of claim 280 wherein the license request includes a 
public key associated with the client computer and wherein the generating comprises: 

encrypting the decryption key with the public key to obtain an encrypted 
decryption key; 

encrypting the digital rights license with the decryption key to obtain an 
encrypted digital rights license; and 

generating the license response including the encrypted digital rights license, 
the encrypted decryption key, and at least one certificate to be used by the client computer to 
validate the license response. 



286. (New) The method of claim 280 wherein the at least one server 
certificate comprises a first certificate for validating the server. 



287. (New) The method of claim 286 wherein the at least one server 
certificate further comprises a second certificate for validating a second server associated 
with the digital content. 
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288. (New) The method of claim 280 wherein the license request is 
contained in an HTTP request transmitted by the client computer to an address identified by 
the digital content. 

289. (New) The method of claim 280 wherein the license request includes a 
version number for a Digital Rights Management (DRM) system on the client computer. 

290. (New) A method for a server to provide to a client computer a digital 
license of one or more rights to render digital content, the digital content encrypted with a 
decryption key, the method comprising: 

receiving, from the client computer, a license request, the license request 
containing a key identifier that identifies the decryption key; and 

responsive to the request, transmitting a license response to the client 
computer, the license response including a digital rights license, the decryption key identified 
by the key identifier, and at least one server certificate to be used by the client computer to 
validate the license response. 

291 . (New) The method of claim 290 wherein the license request includes a 
content identifier, and a list containing one or more requested rights, and wherein the digital 
rights license grants rights based on the one or more requested rights. 
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292. (New) The method of claim 290 wherein the license request includes a 
client certificate associated with the client computer. 

293. (New) The method of claim 290 wherein transmitting comprises: 
transmitting the license response to the client computer as part of an HTML 

page. 

294. (New) The method of claim 290 wherein transmitting further 



comprises: 



state. 



transmitting the license response in an encoded and at least partially encrypted 



295. (New) The method of claim 290 wherein the license request includes a 
public key associated with the client computer and wherein the transmitting further 
comprises: 

transmitting the decryption key as an encrypted decryption key, the encrypted 
decryption key being the decryption key encrypted with the public key; and 

transmitting the digital rights license as an encrypted digital rights license, the 
encrypted digital rights license being the digital rights license encrypted with the decryption 
key. 



296. (New) The method of claim 290 wherein the at least one server 
certificate comprises a first certificate for validating the server. 
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297. (New) The method of claim 296 wherein the at least one server 
certificate further comprises a second certificate for validating a second server associated 
with the digital content. 



298. (New) The method of claim 290 wherein the license request is 
contained in an HTTP request transmitted by the client computer to an address identified by 
the digital content. 

299. (New) The method of claim 290 wherein the license request includes a 
version number for a Digital Rights Management (DRM) system on the client computer. 
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